Started by timerStarted by timerBRANCHmasterEMAIL_NOTIFICATIONSjenkins-notifications@lists.osmocom.org001189504711189504714696164696161.0118950473118950473011942008900568c50f4b4a0222a964710ce3124a66fe13c804be65c50f4b4a0222a964710ce3124a66fe13c804be65origin/masterc50f4b4a0222a964710ce3124a66fe13c804be65c50f4b4a0222a964710ce3124a66fe13c804be65origin/master5b52b9704ed57386959a73c98e946c756e0188e6cb52b9704ed57386959a73c98e946c756e0188e6crefs/remotes/origin/osmith/wipb52b9704ed57386959a73c98e946c756e0188e6cb52b9704ed57386959a73c98e946c756e0188e6crefs/remotes/origin/osmith/wip253c7c48718ba3637e29fc6a7af4e2e39ba0679bb8dc7c48718ba3637e29fc6a7af4e2e39ba0679bb8drefs/remotes/origin/masterc7c48718ba3637e29fc6a7af4e2e39ba0679bb8dc7c48718ba3637e29fc6a7af4e2e39ba0679bb8drefs/remotes/origin/masterc50f4b4a0222a964710ce3124a66fe13c804be65c50f4b4a0222a964710ce3124a66fe13c804be65origin/masterhttps://gerrit.osmocom.org/pysimhttps://jenkins.osmocom.org/jenkins/view/all/job/simtester-sanitize/lastBuild/artifacthttps://jenkins.osmocom.org/jenkins/view/all/job/simtester-sanitize/changeshttps://jenkins.osmocom.org/jenkins/view/all/job/simtester-sanitize/lastBuild/https://jenkins.osmocom.org/jenkins/view/all/job/simtester-sanitize/lastBuild/testReportfalse#568469616470201simtester-sanitize #568568falsefalse56891319SUCCESS1776591930785https://jenkins.osmocom.org/jenkins/view/all/job/simtester-sanitize/568/simtester- setup.pyrequirements.txtREADME.mdc50f4b4a0222a964710ce3124a66fe13c804be651776337279000https://jenkins.osmocom.org/jenkins/user/pmaierpmaier@sysmocom.depmaier@sysmocom.derequirements: ensure safe version of PyYAML >= 5.4 (CVE-2020-1747)
PyYAML versions 5.1–5.3.1 are vulnerable to CVE-2020-1747, which allows
arbitrary code execution through yaml.FullLoader. While PyYAML 5.4+
patches this, the dependency specification (pyyaml >= 5.1) doesn't
guarantee a safe version. Let's increase the requirement to version
5.4 to ensure a safe version of is used.
This patch is based on suggestions from:
"YanTong C <chyeyantong03@gmail.com>"
Change-Id: I901c76c59e9c1bab030eab81038e04a475b32510
2026-04-16 11:01:19 +0000c50f4b4a0222a964710ce3124a66fe13c804be65requirements: ensure safe version of PyYAML >= 5.4 (CVE-2020-1747)editREADME.mdeditrequirements.txteditsetup.py
githttps://jenkins.osmocom.org/jenkins/user/pmaierpmaier@sysmocom.depmaier